Controller (Art. 4 No. 7 GDPR)
XYTE mobility GmbH, Maximilianstr. 23, 82319 Starnberg, Germany
E-mail: privacy@xyte-mobility.com, Phone: +49 179 9093745

Data Protection Officer
No data protection officer has been appointed because fewer than 20 employees regularly process personal data (§ 38 BDSG).

Hosting
This website is hosted by united-domains AG, Gauting (Germany). Server log files (IP address, date/time, browser type, referrer URL, user agent) are processed to ensure stability and security. Legal basis: Art. 6 (1)(f) GDPR. Retention period: 14 days.

Cookies and Consent Management (Sec. 25 TTDSG, Art. 6 (1) GDPR)
Essential cookies ensure the basic functions of the website (Art. 6 (1)(f) GDPR). Statistics and marketing cookies are used only after you give consent (Art. 6 (1)(a) GDPR). You can withdraw your consent at any time via the cookie settings.

Google Analytics 4
Google Analytics is used only with your consent. IP anonymization is enabled. Data transfers to the USA are based on the EU-US Data Privacy Framework (DPF) and Standard Contractual Clauses (SCCs). Purpose: analysis of usage and optimization of the website. Legal basis: Art. 6 (1)(a) GDPR. Retention period: event data 14 months, user ID 2 months or until withdrawal.

Google Ads and Remarketing
With your consent, Google cookies and ad IDs are used to display targeted ads on external websites. Data transfers to the USA are based on the DPF and SCCs. Legal basis: Art. 6 (1)(a) GDPR.

LinkedIn Insight Tag
Collects URL, referrer, IP address, device information and timestamp for audience insights and retargeting. Data transfers to the USA are based on the DPF and SCCs. Legal basis: Art. 6 (1)(a) GDPR.

Embedded YouTube Videos
Videos are loaded in privacy-enhanced mode and activated only after you click on them. Data may then be transferred to Google LLC, USA. Legal basis: Art. 6 (1)(a) GDPR. You can disable video embeds via the consent banner.

Google Fonts (Local Hosting)
We use locally hosted Google Fonts for consistent typography; no connection to Google servers occurs. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in consistent corporate design)

Payments via Stripe
We process your name, address, email address, payment data and IP address via Stripe Payments (Stripe Inc., USA) for contract fulfilment and fraud prevention. Data transfers to the USA are based on the DPF and SCCs. Legal bases: Art. 6 (1)(b) and (f) GDPR. Retention period: 6–10 years in line with tax and commercial law.

Contact Form and HubSpot CRM
Data entered in the contact form (name, email address, message) are stored in HubSpot CRM (EU servers) to handle your request and, if applicable, initiate a business relationship. Legal bases: Art. 6 (1)(b) or (f) GDPR. Retention period: 12 months unless a longer retention period is required by law.

Newsletter (HubSpot)
Sent using a double opt-in process. Data collected: email address, IP address, subscription timestamp, as well as open and click behaviour. Legal basis: Art. 6 (1)(a) GDPR. You can unsubscribe at any time via the link in the newsletter.

Social Media Presence on LinkedIn
For LinkedIn Page Insights, LinkedIn Ireland and we are joint controllers (Art. 26 GDPR; Joint Controller Addendum). Legal basis: Art. 6 (1)(f) GDPR.

Data Transfers to Third Countries
Transfers to US companies occur only if they are certified under the EU-US DPF and SCCs are in place, or if you have given explicit consent (Art. 49 (1)(a) GDPR).

Recipients
Internal departments (marketing, sales, IT), hosting and IT service providers, payment providers, and authorities where legally required.

Automated Decision-Making / Profiling
Does not take place.

Data Retention / Deletion
Personal data are deleted as soon as the purpose no longer applies or statutory retention periods expire.

Your Rights
You have the rights of access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. You may lodge a complaint with any supervisory authority, in particular with the Bavarian State Office for Data Protection Supervision (BayLDA) in Ansbach, Germany.

Changes to This Privacy Policy
We update this policy whenever legal requirements or our processing activities change. The current version is always available on our website.